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Amendments to the Claims 

This listing of claims will replace all prior version, and 
listings, of claims in the application: 

Listing of Claims: 

1 . (Original) A method by which a first computing entity having an RSA key pair (NA,eA), 
(NA,dA) digitally signs and encrypts a message data string, m, for decryption by a second 
computing entity having an RSA key pair (Ne^eB), (Ne^de), where |Na| = |Nb| = A: and 

m 6 {0,1}" , and A: = w + ito + ki for integers ko and ki, the method comprising: 

a) selecting an integer r € {0,1}*° , 

b) computing: 

w<— H(Ci{dX least m and r)) 
where H : {0,1}"^*' -> {0,1}''* , and CiQ is a deterministic combination function, 

c) computing: 

s<- Enc(w, C2(2X least m and r)) 

where EncQ is a symmetric-key encryption function using w as key, and C2O is a 
reversible combination function; 
steps a) to c) being repeated as necessary to obtain s\\(0 <Na\ and then 

d) signing by computing: 

c'f- CCjfat least s and w) Y"" mod Na 
where CsQ is a reversible combination function; and 

e) if c '<Nb, encrypting c' by computing: 

c = c'^* modNg. 

2. (Original) A method according to claim 1, wherein if c'> Nb foUowdng step d), the most 
significant bit of c' is removed to obtain a new c' which is then encrypted by computing: 

c = c'''' modNn. 
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3. (Original) A method according to claim 1 , wherein if c'> Nb following step d), steps a) 
to d) are repeated as necessary to obtain c'<Nb whereupon c' is encrypted by computing: 

c = c'''^ modiVg 

4. (Original) A method according to claim 1 , wherein r is selected at random. 

5. (Original) A method according to claim 1, wherein the function CjQ is a concatenation 
function. 

6. (Original) A method according to claim 1, wherein the function C2O is a concatenation 
function. 

7. (Original) A method according to claim 1, wherein the function C3O is a concatenation 
function. 

8. (Original) A method according to claim 1, wherein the functions CjO> C20> C3O are all 
concatenation functions. 

9. (Currently amended) A method according to any one of tho preceding olaims claiml, 
wherein the symmetric-key encryption function EncQ effects at least the foUowings 
following o perations: 

- forming a hash of the key w; 

- forming an exclusive-OR of the hash of w with the output of the combination function 

C2O' 



&10. (Currently amended) Apparatus for carrying out the method of claim 1 . 
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911. (Cunrently amended) A computer-readable medium storing a computer program arranged 
to condition a program-controlled computer, when executed by the latter, to carry out the 
method of claim 1. 

W12. (Currently amended) A method according to claim 1 , wherein the second computing 
entity on receiving c: 

(f) computes: 

c'<-c^^ modNs 
and, provided c' <Na, proceeds to the next step; 

(g) computes: 

c"' modN^ 

with the resuh being subject to a reverse of the combination function C3O whereby to 
recover at least: s and w; 

(h) computes: 

Dec(w, s) 

where DecQ is a synunetric-key decryption function complimenting EncQ, with the result 
being subject to a reverse of the combination function C2O whereby to recover at least: m 
and r; 

(i) checks that the message m is from the first computing entity by checking that: 

>v= H(C](at least m and r)) . 

4413. (Currently amended) A system comprising a first computing entity, a second computing 
entity, and a communications network for communicating the first and second entities, 
the system being arranged to implement the method of claim 4^12. 

4314. (Currently amended) A method according to claim 2, wherein the second computing 
entity on receiving c: 
(f) computes: 

c'^c^'^modiVn, 
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and, provided c' <Na, proceeds to the next step; 

(g) computes: 

with the result being subject to a reverse of the combination function CsQ whereby to 
recover at least: s and w; 

(h) computes, 

Dec(w, s) 

where DecQ is a symmetric-key decryption function complimenting EncQ, with the result 
being subject to a reverse of the combination function C2O whereby to recover at least: m 
and r\ 

(i) checks that the message m is from the first computing entity by checking that: 

w = H(C ](sit least m and r)); 
j) where the check carried out in step (i) fails, computes a new value for c' as: 

c'<-c'+2*^-^ 

and, provided c' < Na, repeats once steps (g) to (i). 

4415. (Currently amended) A system comprising a first computing entity, a second computing 
entity, and a communications network for communicating the first and second entities, 
the system being arranged to implement the method of claim 4314. 

4416. (Currently amended) A method by which a second computing entity having an RSA key 
pair (Nb, Cb), (Nb, dB), decrypts and authenticates a ciphertext c that is purportedly a 
signed and encrypted form produced by a first computing entity of a message data string 
/w, the first computing entity having an RSA key pair (Na^ca), (Na^a) where |Na| = |Nb| 
= A: and m e {0, 1}" , and A: = « + A:^ + A:/ for integers ko and kj; the second computing 
entity on receiving c: 

(a) computes: 

c'<r'c'^"modNs 
and proceeds to the next step provided that c'<Na; 
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(b) computes: 

c'^ modiV^ 

with at least quantities s and w being recovered from the result; 

(c) computes: 

Dec(w,s) 

where DecQ is a symmetric-key decryption function complimenting EncQ, with at least 
quantities m and r being recovered from the resuh; 

(d) checks that the message m is from the first computing entity by checking that: 

w = H(Ci(at least m and r)) 
where H : {0,1}"^*' -> {0,1}*' and CjQ is a deterministic combination function. 

4^17. (Currently amended) A method according to claim 4416, wherein the function CiQ is a 
concatenation function. 

4^18. (Currently amended) A method according to claim 4416, wherein the symmetric-key 
decryption function DecQ effects at least the foUowings operations: 
- forming a hash of the key w; 
' - forming an exclusive-OR of the hash of w with s. 

4^19. (Currently amended) Apparatus for carrying out the method of claim 4416. 

4«20. (Currently amended) A computer-readable medium storing a computer program arranged 
to condition a program-controlled, computer, when executed by the latter, to carry out the 
method of claim 4416. 

4^21. (Currently amended) A method by which a first computing entity having an RSA key pair 
(NA,eA), (NA,dA) digitally signs and encrypts a message data string, m, for decryption by a 
second computing entity having an RSA key pair (Nb, ee), (Nb, ds), where |Na| = |Nb| = k 
and m G {0,1}", and k = n + ko kj for integers ko and kj, the method comprising: 
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a) selecting an integer r e {0,1}*' , 

b) forming the hash (o = Him \\ r) where H : {0,1}"''^ ^ {0,1}"^' , and 

c) forming the hash s = G{o)) @ (m || r) where G : {0,1}*' ^ {0,1}"''° ; 
steps a) to c) being repeated as necessary to obtain ^ || < iV^; and then 

d) signing by forming c' - {s \\ (oY^ mod A^^ ; and, if c' > Nb, 
removing the most significant bit of c' to obtain a new c'; and then 

e) encrypting c' by forming c = c'^* mod A^^ . 

2022. (Currently amended) The method as claimed in claim 49-21 in which r is selected at 
random. 

24-23 . (Currently amended) A computer storage medium having stored thereon a computer 
program readable by a general-purpose computer, the computer program including 
instructions for said general purpose computer to configure it for implementing the steps 
of the method of claim -1921. 

2224. (Currently amended) A method by which a first computing entity having an RSA key pair 
(Na^ca), (NA,dA) digitally signs and encrypts a message data string, m, for decryption by a 
second computing entity having an RSA key pair (NbjCb), (Nb^b) where |Na| = |Nb| = k 
and m e {0,1}", and k = n + ko-^ kj for integers ko and ki; the method comprising: 

a) selecting an integer r G {0,1}^° , 

b) forming the hash (o = H{m \\ r) where H : {0,1}"^'^ {0,1}*' , and 

c) forming the hash s = G{o)) ® (m || r) where G : {0,1}*' ^ {0,1}''"'^ ; 
steps a) to c) being repeated as necessary to obtain s || co < Na and then 

d) signing by forming c' - {s || (oY'' mod A^^ ; 

steps aO to d) being repeated as necessary to obtain c' < Nb, and then 

e) encrypting c' by forming c = c'^^ mod A^^. 
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33^25. (Currently amended) The method as claimed in claim 33-24 in which r is selected at 
random. 



3426. (Currently amended) A computer storage medium having stored thereon a computer 
program readable by a general-purpose computer, the computer program including 
instructions for said general purpose computer to configure it for implementing the steps 
of the method of claim 3324. 



